LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →
Home / Vulnerability Intelligence / CVE-2026-32523

CVE-2026-32523 - Vulnerability Analysis

CriticalCVSS: 9.9

Last Updated: March 26, 2026

denishua WPJAM Basic - Unrestricted File Upload

Published: March 25, 2026Updated: March 26, 2026Remote Exploitable

Overview

denishua WPJAM Basic <= 6.9.2 contains an unrestricted file upload vulnerability caused by insufficient validation of uploaded file types, letting attackers upload malicious files, exploit requires ability to upload files.

Severity & Score

Severity: Critical
CVSS Score: 9.9

Impact

Attackers can upload malicious files, potentially leading to remote code execution or site compromise.

Mitigation

Update to the latest version beyond 6.9.2.

Details

CVE ID
CVE-2026-32523
Severity
Critical
CVSS Score
9.9
Type
unrestricted_file_upload
Status
new

CWE

  • CWE-434

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H